August 2015 — KeyRaider malware steals 225K Apple accounts from jailbroken iPhones

Data compromised

Apple IDs, credentials, certificates, purchase receipts

Technical writeup

Root cause

Malware on jailbroken devices.

References

• https://techcrunch.com/2015/08/31/keyraider-malware-responsible-for-possibly-largest-known-apple-account-theft-to-date-affecting-225000-users/
• https://unit42.paloaltonetworks.com/keyraider-ios-malware-steals-over-225000-apple-accounts-to-create-free-app-utopia/